Skip to content

build(deps): bump the python group across 1 directory with 17 updates - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/apps/agent/python-8971371c1d
Open

build(deps): bump the python group across 1 directory with 17 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/apps/agent/python-8971371c1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown

Bumps the python group with 17 updates in the /apps/agent directory:

Package From To
google-adk 2.2.0 2.8.0
google-cloud-logging 3.13.0 3.16.3
google-genai 2.12.1 2.20.0
litellm 1.83.7 1.98.0
fastapi 0.136.1 0.141.1
uvicorn 0.38.0 0.52.4
aiohttp 3.13.5 3.14.3
pydantic 2.12.5 2.13.5
pydantic-settings 2.11.0 2.15.0
json-repair 0.52.3 0.63.4
sqlalchemy 2.0.44 2.0.52
aiosqlite 0.21.0 0.22.1
asyncpg 0.30.0 0.31.0
sqlparse 0.5.3 0.6.0
tree-sitter 0.23.2 0.26.0
beautifulsoup4 4.12.3 4.15.0
python-dotenv 1.0.1 1.2.3

Updates google-adk from 2.2.0 to 2.8.0

Release notes

Sourced from google-adk's releases.

v2.8.0

2.8.0 (2026-08-25)

Features

  • a2a: add native task mode support to RemoteA2aAgent (72f3ff5)
  • add ADK_MAX_LLM_CALLS environment variable to configure max LLM calls limit (75679db)
  • add create_data_agent tool to data_agent toolset (5cd38a0)
  • add delete_data_agent tool to data_agent toolset (9b451fc)
  • add location parameter to list_accessible_data_agents in data_agent toolset (393ec08)
  • add Model Armor guardrail plugin (11efc3f)
  • add nvidia nim integration sample (c6bba8d)
  • add sample for skill state injection via adk_inject_state (9384127)
  • add spreadsheet mime types to load_artifact_tool (370027a)
  • add update_data_agent tool to data_agent toolset (92d00aa)
  • allow configuring Vertex AI API version (ede87c2), closes #3246
  • allow streaming tools to set response scheduling per yield (bf2efd7)
  • antigravity: capture client-side tool outcomes for a function_response (4599a52)
  • cli: Support Cloud Build worker pools for Agent Engine deploy (e577c30)
  • eval: support custom metrics in AgentEvaluator (babb11c)
  • guard against SQL injection vulnerabilities in BigQuery tools (d6290a0)
  • live: Add VIDEO to the allowed modalities in the ADK API server (dd998a7)
  • live: let a live streaming tool send messages to the user directly (98896eb)
  • live: run before and after model callbacks in live mode (ef2d680)
  • live: surface live interaction_status on LlmResponse and Event (b858904)
  • live: use RunConfig.session_resumption.handle when opening a live session (eac32c3)
  • mcp: report MCP HTTP exchanges as OpenTelemetry log records (85a6fa1)
  • parallelize LLM-as-judge evaluation using asyncio.gather() (0dbb88c)
  • preserve field descriptions in set_model_response schema (a30858b), closes #6707
  • record context cache state on the LLM call span (c0614d6)
  • resolve auth for RemoteA2aAgent in AgentRegistry (d695494)
  • support auth_scheme and auth_credential in RemoteA2aAgent (d42c634)
  • support injecting custom LLM clients into Gemini and AnthropicLlm (a01d516), closes #5027
  • support memory_id and allowed_topics in Vertex Memory Bank (bf73360)
  • support opt-in session retention in MultimodalToolResultsPlugin (775c1bd), closes #6695
  • support sub-agent escalation event in ParallelAgent (0fd681e), closes #5104

Telemetry

  • telemetry: add per-invocation token spend metrics for invoke_agent (dc00db5)
  • telemetry: add per-workflow inference and tool call counts (6e6c4a5)
  • telemetry: add per-workflow token spend metrics (dd8797e)
  • telemetry: Expand telemetry for load_skill_resource span (6e0facf)
  • telemetry: honor RunConfig.telemetry at the runner's invocation span (00fc6eb)

Note: new experimental telemetry feature for token usage per agent invocation and per workflow, inference and tool call counts per workflow, and expanded load_skill attributes. Off by default, opt in with ADK_EXPERIMENTAL_TELEMETRY=true or RunConfig.telemetry.adk_experimental_telemetry_opt_in=True.

Bug Fixes

... (truncated)

Changelog

Sourced from google-adk's changelog.

2.8.0 (2026-08-25)

Features

  • a2a: add native task mode support to RemoteA2aAgent (72f3ff5)
  • add ADK_MAX_LLM_CALLS environment variable to configure max LLM calls limit (75679db)
  • add create_data_agent tool to data_agent toolset (5cd38a0)
  • add delete_data_agent tool to data_agent toolset (9b451fc)
  • add location parameter to list_accessible_data_agents in data_agent toolset (393ec08)
  • add Model Armor guardrail plugin (11efc3f)
  • add nvidia nim integration sample (c6bba8d)
  • add sample for skill state injection via adk_inject_state (9384127)
  • add spreadsheet mime types to load_artifact_tool (370027a)
  • add update_data_agent tool to data_agent toolset (92d00aa)
  • allow configuring Vertex AI API version (ede87c2), closes #3246
  • allow streaming tools to set response scheduling per yield (bf2efd7)
  • antigravity: capture client-side tool outcomes for a function_response (4599a52)
  • cli: Support Cloud Build worker pools for Agent Engine deploy (e577c30)
  • eval: support custom metrics in AgentEvaluator (babb11c)
  • guard against SQL injection vulnerabilities in BigQuery tools (d6290a0)
  • live: Add VIDEO to the allowed modalities in the ADK API server (dd998a7)
  • live: let a live streaming tool send messages to the user directly (98896eb)
  • live: run before and after model callbacks in live mode (ef2d680)
  • live: surface live interaction_status on LlmResponse and Event (b858904)
  • live: use RunConfig.session_resumption.handle when opening a live session (eac32c3)
  • mcp: report MCP HTTP exchanges as OpenTelemetry log records (85a6fa1)
  • parallelize LLM-as-judge evaluation using asyncio.gather() (0dbb88c)
  • preserve field descriptions in set_model_response schema (a30858b), closes #6707
  • record context cache state on the LLM call span (c0614d6)
  • resolve auth for RemoteA2aAgent in AgentRegistry (d695494)
  • support auth_scheme and auth_credential in RemoteA2aAgent (d42c634)
  • support injecting custom LLM clients into Gemini and AnthropicLlm (a01d516), closes #5027
  • support memory_id and allowed_topics in Vertex Memory Bank (bf73360)
  • support opt-in session retention in MultimodalToolResultsPlugin (775c1bd), closes #6695
  • support sub-agent escalation event in ParallelAgent (0fd681e), closes #5104
  • telemetry: add per-invocation token spend metrics for invoke_agent (dc00db5)
  • telemetry: add per-workflow inference and tool call counts (6e6c4a5)
  • telemetry: add per-workflow token spend metrics (dd8797e)
  • telemetry: Expand telemetry for load_skill_resource span (6e0facf)
  • telemetry: honor RunConfig.telemetry at the runner's invocation span (00fc6eb)

Bug Fixes

  • a2a: keep file payloads out of the debug log line (ef158d3)
  • agents: report which toolset an agent lost when one fails to load (66930e6)
  • artifacts: Publish file artifact versions atomically (94475c9)
  • auth: take the auth scheme from the request, not the client's response (8989aea)
  • avoid O(n^2) deep event comparison during rehydration (b8dd086), closes #6657

... (truncated)

Commits
  • 76a96e6 chore: update last-release-sha for next main release
  • 2174b84 chore(release/candidate): release 2.8.0 (#6900)
  • 0880bbe fix: end a ParallelAgent early only when a direct sub-agent escalates (cherry...
  • 401cd6d fix: keep transport options and scoped state keys out of the debug log
  • 1bc001e fix(sessions): admit the stdlib data types legacy session state holds
  • 2956083 fix: remove an internal link from a shipped comment and guard against more
  • 94cefbb fix: lazy-load evaluation dependencies in AgentEvaluator
  • 4d0d63c fix: prefer the function response's own invocation over a caller-supplied id ...
  • 67ca98c fix: Fix crashes and cross-invocation leaks from copying RunConfig.http_options
  • a86bd25 fix: redact credentials from DebugLoggingPlugin output file
  • Additional commits viewable in compare view

Updates google-cloud-logging from 3.13.0 to 3.16.3

Release notes

Sourced from google-cloud-logging's releases.

google-cloud-logging: v3.16.3

3.16.3 (2026-08-21)

Documentation

  • handwritten: centralize CONTRIBUTING.rst pointers (#17642) (23b9499)

google-cloud-logging: v3.16.2

3.16.2 (2026-08-06)

Bug Fixes

Changelog

Sourced from google-cloud-logging's changelog.

Changelog

PyPI History

3.15.0 (2026-06-02)

Features

3.14.0 (2026-04-02)

Features

Commits
  • 3e29682 chore: release main (#18013)
  • b4d9717 feat: check python and dependency versions in spanner packages (#18177)
  • 66794a0 chore(bigtable): Rerouted legacy client row filters to data client row filter...
  • b42122e Revert "fix(auth): parse hostname for mTLS and PSC endpoint certifica… (#18189)
  • e20796a fix(google-auth-oauthlib): prevent port re-use on windows (#18166)
  • b642373 fix(auth): parse hostname for mTLS and PSC endpoint certificate rotat… (#18153)
  • 5bc3899 feat(spanner): add DataBoost and auto_partition_mode support to DBAPI driver ...
  • 2b056ab docs(django-spanner, common-protos): centralize CONTRIBUTING.rst pointers (#1...
  • 91d5e2a chore(bigtable): added warning to MutationsBatcher (#18176)
  • 23b9499 docs(handwritten): centralize CONTRIBUTING.rst pointers (#17642)
  • Additional commits viewable in compare view

Updates google-genai from 2.12.1 to 2.20.0

Release notes

Sourced from google-genai's releases.

v2.20.0

2.20.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (4a80954)
  • Add environment files support and scotty file download helper (3074263)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (ef39c40)

v2.19.0

2.19.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (e8cd7d0)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (656da78)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (599d89f)
  • Add video resolution and extension task parameters (c3bdb88)

v2.18.1

2.18.1 (2026-08-13)

Bug Fixes

v2.18.0

2.18.0 (2026-08-12)

Features

  • Add interaction_status to LiveServerContent (66e224c)
  • api: Make the deferred service tier publicly available on Vertex (e1f7c40)
  • Enable json schema in FunctionDeclaration parser (62d50d6)
  • Make speech_config a structured object. (cc0d42e)
  • Support injecting httpx2 client. (012804d), refs #2680

Bug Fixes

  • Improve AFC(automatic function calling) in chat including fixing bugs in AFC for generate_content_stream. also log warnings in generate_content, generate_content_stream and their async variants that AFC is meant to be used in chat experience, not directly in models module. (fe6118e)

Performance Improvements

  • Build model validators on first use instead of at import (66bfe95), refs #2784

... (truncated)

Changelog

Sourced from google-genai's changelog.

2.20.0 (2026-08-25)

Features

  • Add AudioTranscriptionConfigMode (4a80954)
  • Add environment files support and scotty file download helper (3074263)
  • Add TYPE_JPEG2000 to VideoContent.MimeType enum (ef39c40)

2.19.0 (2026-08-19)

Features

  • Add mode enum (VERBATIM, SMART) to AudioTranscriptionConfig and TranscriptionConfig. (e8cd7d0)
  • Add enable_data_retention to ToolParallelAiSearch, Add step_count to ReinforcementTuningHyperParameters, Add BidiGenerateContentSetup (656da78)
  • Add IDLE state to live connection status enum and mark REQUIRES_ACTION as deprecated. (599d89f)
  • Add video resolution and extension task parameters (c3bdb88)

2.18.1 (2026-08-13)

Bug Fixes

2.18.0 (2026-08-12)

Features

  • Add interaction_status to LiveServerContent (66e224c)
  • api: Make the deferred service tier publicly available on Vertex (e1f7c40)
  • Enable json schema in FunctionDeclaration parser (62d50d6)
  • Make speech_config a structured object. (cc0d42e)
  • Support injecting httpx2 client. (012804d), refs #2680

Bug Fixes

  • Improve AFC(automatic function calling) in chat including fixing bugs in AFC for generate_content_stream. also log warnings in generate_content, generate_content_stream and their async variants that AFC is meant to be used in chat experience, not directly in models module. (fe6118e)

Performance Improvements

  • Build model validators on first use instead of at import (66bfe95), refs #2784
  • Lazily import the interactions API to speed up import google.genai (89dcfe5)
  • Stop importing the requests HTTP stack at module scope (3a44936)

2.17.0 (2026-08-06)

... (truncated)

Commits
  • 66518c9 chore(main): release 2.20.0 (#2884)
  • 4a80954 feat: Add AudioTranscriptionConfigMode
  • 5be429c chore: Part.media_processing
  • cb75a08 chore: internal change to resolve naming collision
  • 3074263 feat: add environment files support and scotty file download helper
  • 6680718 No public description
  • 53e386e chore: Move major release check to job level in block_major_releases workflow
  • 43ef621 chore: Disable GenerateImages for Gemini API
  • 028e01d chore: regenerate
  • ef39c40 feat: Add TYPE_JPEG2000 to VideoContent.MimeType enum
  • Additional commits viewable in compare view

Updates litellm from 1.83.7 to 1.98.0

Release notes

Sourced from litellm's releases.

v1.98.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.98.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.98.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.98.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

... (truncated)

Commits

Updates fastapi from 0.136.1 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

  • 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

0.141.0

Features

  • ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits
  • 95f8322 🔖 Release version 0.141.1 (#16106)
  • f137944 📝 Update release notes
  • d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
  • 1d211b9 📝 Update release notes
  • 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
  • c7e7b65 🔖 Release version 0.141.0 (#16103)
  • 6bceb84 📝 Update release notes
  • 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • Additional commits viewable in compare view

Updates uvicorn from 0.38.0 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

  • Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

  • Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

  • Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

  • Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
  • Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
  • Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
  • Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

  • Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

  • Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

  • Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

  • Remove colorama from the standard extra (#3027)

... (truncated)

Commits

Updates aiohttp from 3.13.5 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates pydantic from 2.12.5 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: ...

Description has been truncated

@dependabot
build(deps): bump the python group across 1 directory with 17 updates
fe5df05 
Bumps the python group with 17 updates in the /apps/agent directory:

| Package | From | To |
| --- | --- | --- |
| [google-adk](https://github.com/google/adk-python) | `2.2.0` | `2.8.0` |
| [google-cloud-logging](https://github.com/googleapis/google-cloud-python) | `3.13.0` | `3.16.3` |
| [google-genai](https://github.com/googleapis/python-genai) | `2.12.1` | `2.20.0` |
| [litellm](https://github.com/BerriAI/litellm) | `1.83.7` | `1.98.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.141.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.38.0` | `0.52.4` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.13.5` | `3.14.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.11.0` | `2.15.0` |
| [json-repair](https://github.com/mangiucugna/json_repair) | `0.52.3` | `0.63.4` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.44` | `2.0.52` |
| [aiosqlite](https://github.com/omnilib/aiosqlite) | `0.21.0` | `0.22.1` |
| [asyncpg](https://github.com/MagicStack/asyncpg) | `0.30.0` | `0.31.0` |
| [sqlparse](https://github.com/andialbrecht/sqlparse) | `0.5.3` | `0.6.0` |
| [tree-sitter](https://github.com/tree-sitter/py-tree-sitter) | `0.23.2` | `0.26.0` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.12.3` | `4.15.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.2.3` |



Updates `google-adk` from 2.2.0 to 2.8.0
- [Release notes](https://github.com/google/adk-python/releases)
- [Changelog](https://github.com/google/adk-python/blob/main/CHANGELOG.md)
- [Commits](google/adk-python@v2.2.0...v2.8.0)

Updates `google-cloud-logging` from 3.13.0 to 3.16.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-logging-v3.13.0...google-cloud-logging-v3.16.3)

Updates `google-genai` from 2.12.1 to 2.20.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-genai@v2.12.1...v2.20.0)

Updates `litellm` from 1.83.7 to 1.98.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits/v1.98.0)

Updates `fastapi` from 0.136.1 to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.1...0.141.1)

Updates `uvicorn` from 0.38.0 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.38.0...0.52.4)

Updates `aiohttp` from 3.13.5 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.13.5...v3.14.3)

Updates `pydantic` from 2.12.5 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.5)

Updates `pydantic-settings` from 2.11.0 to 2.15.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.11.0...v2.15.0)

Updates `json-repair` from 0.52.3 to 0.63.4
- [Release notes](https://github.com/mangiucugna/json_repair/releases)
- [Commits](mangiucugna/json_repair@v0.52.3...v0.63.4)

Updates `sqlalchemy` from 2.0.44 to 2.0.52
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `aiosqlite` from 0.21.0 to 0.22.1
- [Changelog](https://github.com/omnilib/aiosqlite/blob/main/CHANGELOG.md)
- [Commits](omnilib/aiosqlite@v0.21.0...v0.22.1)

Updates `asyncpg` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](MagicStack/asyncpg@v0.30.0...v0.31.0)

Updates `sqlparse` from 0.5.3 to 0.6.0
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.5.3...0.6.0)

Updates `tree-sitter` from 0.23.2 to 0.26.0
- [Release notes](https://github.com/tree-sitter/py-tree-sitter/releases)
- [Commits](tree-sitter/py-tree-sitter@v0.23.2...v0.26.0)

Updates `beautifulsoup4` from 4.12.3 to 4.15.0

Updates `python-dotenv` from 1.0.1 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.1...v1.2.3)

---
updated-dependencies:
- dependency-name: google-adk
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: google-cloud-logging
  dependency-version: 3.16.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: google-genai
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: litellm
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pydantic-settings
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: json-repair
  dependency-version: 0.63.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sqlalchemy
  dependency-version: 2.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: aiosqlite
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sqlparse
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: tree-sitter
  dependency-version: 0.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from ucinar as a code owner September 1, 2026 15:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ucinar ucinar Awaiting requested review from ucinar ucinar is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants